Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/E0CE223E347911F08105690CC4F9AE02.roa
File: E0CE223E347911F08105690CC4F9AE02.roa (raw, json)
Hash identifier: YS9Ve8TNqE2GmFD9q+56zz4mHubQNinPQjJkfKmATnA=
Subject key identifier: B1:FF:5F:A0:5D:D0:9E:6C:A3:8A:A7:FD:63:36:2C:AE:0B:2A:D9:7F
Certificate issuer: /CN=A913C432/serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Certificate serial: 0FF0
Authority key identifier: 32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/E0CE223E347911F08105690CC4F9AE02.roa
Signing time: Tue 20 May 2025 13:59:14 +0000
ROA not before: Tue 20 May 2025 13:59:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138981
IP address blocks: 103.138.24.0/22 maxlen: 22
103.138.26.0/23 maxlen: 23
103.138.26.0/24 maxlen: 24
103.138.27.0/24 maxlen: 24
2404:bec0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 20 May 2025 14:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4080 (0xff0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A913C432, serialNumber=329DA03DB9944751498A5FCA53C85DAA60CB9A32
Validity
Not Before: May 20 13:59:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=682c8ab2-b811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:75:fc:65:83:f2:c2:3f:f1:13:21:cd:55:e6:
8b:9c:80:7e:78:43:fc:f8:e5:92:1c:8e:7f:91:2a:
66:a4:b8:75:4a:27:a4:a4:d0:52:d2:51:f5:66:dc:
07:7d:2b:91:b0:a9:17:ff:f9:1a:22:65:2e:42:10:
af:26:42:c6:6b:47:75:e7:d3:f6:79:5b:c7:2f:f4:
67:f8:98:67:90:60:2e:b2:41:69:ea:89:de:94:74:
91:02:eb:26:a4:6e:26:76:57:35:29:d6:f2:26:e7:
7d:15:74:89:76:aa:87:d8:83:9f:53:4d:8b:45:e8:
8f:55:e3:fa:e9:44:70:74:f8:63:3f:cf:4a:e2:b8:
96:9f:52:4c:be:12:20:20:96:b4:69:61:47:3a:e6:
d9:28:b3:7c:1e:ca:cd:8d:21:f3:fe:37:07:e6:4f:
90:3d:01:fb:b0:83:cd:6e:27:16:ae:67:f7:74:a1:
c6:3a:3a:14:8e:e9:1d:eb:15:00:50:0e:8b:b1:4e:
b3:f9:38:14:74:98:1e:c2:be:6e:4f:4e:6e:32:90:
e8:7c:5d:b2:37:b2:b5:b5:62:3f:59:b7:dc:97:7d:
81:b4:dd:39:7f:05:33:e3:77:9a:06:39:c5:e9:54:
73:0a:d4:43:4f:40:5c:cc:a3:2b:9a:52:63:ce:10:
72:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:FF:5F:A0:5D:D0:9E:6C:A3:8A:A7:FD:63:36:2C:AE:0B:2A:D9:7F
X509v3 Authority Key Identifier:
keyid:32:9D:A0:3D:B9:94:47:51:49:8A:5F:CA:53:C8:5D:AA:60:CB:9A:32
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/Mp2gPbmUR1FJil_KU8hdqmDLmjI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mp2gPbmUR1FJil_KU8hdqmDLmjI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C432/2DCABA685CF211E984939224C4F9AE02/E0CE223E347911F08105690CC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.138.24.0/22
IPv6:
2404:bec0::/32
Signature Algorithm: sha256WithRSAEncryption
83:4d:38:4f:d9:c7:c0:4c:37:2f:d6:61:8e:60:5d:fb:a9:91:
74:6c:77:8a:96:c4:2a:58:10:27:79:7f:dc:7c:9b:9c:ae:02:
65:e8:1a:c6:d5:d6:e3:3b:b8:4c:fc:fa:3d:b1:a3:3b:19:46:
1a:df:85:eb:c8:98:72:30:5b:fa:7d:37:0d:00:b6:bd:83:a6:
19:ab:e7:d0:7c:10:ef:35:6d:38:75:48:ce:8f:5a:c6:d3:74:
5a:89:89:38:55:70:c2:ae:89:fd:ee:82:ff:6c:70:f3:3d:1a:
55:43:2a:20:dd:9f:da:93:84:97:47:5f:aa:76:c3:73:cf:91:
0f:ba:8e:3e:52:d9:63:7b:8e:2a:19:b9:09:47:1b:39:c0:f2:
c5:5b:bc:32:43:7f:97:29:3f:94:31:9a:10:8e:16:05:1f:d9:
f9:b1:e2:8d:2a:a4:82:e0:9f:c2:b4:68:a8:80:15:dd:b2:8c:
4d:6e:03:69:a6:73:0c:ed:bb:ac:63:4a:5d:ec:97:2b:f2:1a:
fb:cc:d9:47:e4:74:6f:09:d1:66:ad:f2:db:5a:49:b8:cc:9b:
ff:f2:16:47:6b:37:24:a3:75:86:65:79:17:8b:fc:22:83:b7:
c5:5d:1d:5c:a8:af:71:c4:f7:9b:3b:43:f0:10:20:66:d6:a1:
73:c9:0f:d3
-----BEGIN CERTIFICATE-----
MIIFgDCCBGigAwIBAgICD/AwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0M0MzIxMTAvBgNVBAUTKDMyOURBMDNEQjk5NDQ3NTE0OThBNUZDQTUzQzg1REFB
NjBDQjlBMzIwHhcNMjUwNTIwMTM1OTE0WhcNMjYwNzAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02ODJjOGFiMi1iODExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApnX8ZYPywj/xEyHNVeaLnIB+eEP8+OWSHI5/kSpmpLh1SiekpNBS0lH1ZtwH
fSuRsKkX//kaImUuQhCvJkLGa0d159P2eVvHL/Rn+JhnkGAuskFp6onelHSRAusm
pG4mdlc1KdbyJud9FXSJdqqH2IOfU02LReiPVeP66URwdPhjP89K4riWn1JMvhIg
IJa0aWFHOubZKLN8HsrNjSHz/jcH5k+QPQH7sIPNbicWrmf3dKHGOjoUjukd6xUA
UA6LsU6z+TgUdJgewr5uT05uMpDofF2yN7K1tWI/Wbfcl32BtN05fwUz43eaBjnF
6VRzCtRDT0BczKMrmlJjzhByVwIDAQABo4ICpDCCAqAwHQYDVR0OBBYEFLH/X6Bd
0J5so4qn/WM2LK4LKtl/MB8GA1UdIwQYMBaAFDKdoD25lEdRSYpfylPIXapgy5oy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQzQzMi8yRENBQkE2ODVD
RjIxMUU5ODQ5MzkyMjRDNEY5QUUwMi9NcDJnUGJtVVIxRkppbF9LVThoZHFtRExt
akkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL01wMmdQYm1VUjFGSmlsX0tVOGhkcW1ETG1qSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
M0M0MzIvMkRDQUJBNjg1Q0YyMTFFOTg0OTM5MjI0QzRGOUFFMDIvRTBDRTIyM0Uz
NDc5MTFGMDgxMDU2OTBDQzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov
L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwLgYIKwYBBQUHAQcBAf8E
HzAdMAwEAgABMAYDBAJnihgwDQQCAAIwBwMFACQEvsAwDQYJKoZIhvcNAQELBQAD
ggEBAINNOE/Zx8BMNy/WYY5gXfupkXRsd4qWxCpYECd5f9x8m5yuAmXoGsbV1uM7
uEz8+j2xozsZRhrfhevImHIwW/p9Nw0Atr2Dphmr59B8EO81bTh1SM6PWsbTdFqJ
iThVcMKuif3ugv9scPM9GlVDKiDdn9qThJdHX6p2w3PPkQ+6jj5S2WN7jioZuQlH
GznA8sVbvDJDf5cpP5QxmhCOFgUf2fmx4o0qpILgn8K0aKiAFd2yjE1uA2mmcwzt
u6xjSl3slyvyGvvM2UfkdG8J0Wat8ttaSbjMm//yFkdrNySjdYZleReL/CKDt8Vd
HVyor3HE95s7Q/AQIGbWoXPJD9M=
-----END CERTIFICATE-----
Generated at Fri Jun 13 02:45:26 2025 by rpki-client